Security Incidents mailing list archives

Re: I am popular today...


From: djk () TOBIT CO UK (Dirk Koopman)
Date: Sat, 29 Apr 2000 14:06:15 +0100


On further scanning it appears that I have a port 7306 open on the machine
which appears to belong a trojan called 'NetMonitor'. Looking on the net for
this shows a product called NetMonitor but no trojan (unless this is it?).

Is this likely to be the culprit? How do I get rid of it if it is?

On 29-Apr-2000 Ryan Sweat wrote:
     You or one of your machines have Napster running ?  This is the likely
cause for the ping requests.  Napster's clients ping the host when making a
query to find the response time of that host.

Ryan
----- Original Message -----
From: "Dirk Koopman" <djk () TOBIT CO UK>
To: <INCIDENTS () SECURITYFOCUS COM>
Sent: Friday, April 28, 2000 3:45 AM
Subject: I am popular today...


Are ALL these people _really_ interested in the response time of my class
C?
Or is this some kind of of (pointless) DoS? Has one of hidden M$ machines
been acquired by some trojan?

Are you one of these?
---------------------------- cut
here --------------------------------------

Apr 27 16:44:24 gate iplog[10085]: ICMP: echo from
cgowave-33-48.cgocable.net
(8 bytes)
Apr 27 16:46:23 gate iplog[10085]: ICMP: echo from i0567.vwr.wanadoo.nl (8
bytes)

--
Dirk-Jan Koopman, Tobit Computer Co Ltd
At the source of every error which is blamed on the computer you will find
at least two human errors, including the error of blaming it on the computer.



Current thread: